$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/13ffc853-d4eb-3a91-b9e1-2abff267e22d.roa File: 13ffc853-d4eb-3a91-b9e1-2abff267e22d.roa (raw, json) Hash identifier: LLpGoqxITiL28vqY7zf4FPKHbxPnTB3wDiunqV0zEMg= Subject key identifier: D2:76:57:DA:46:B2:B9:28:33:C6:AE:50:F6:62:20:11:66:A2:D8:DD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63674CB17892561465BC6F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/13ffc853-d4eb-3a91-b9e1-2abff267e22d.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 65.22.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4c:b1:78:92:56:14:65:bc:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=05abe56f-4a29-4bd5-b9cb-bb8c50ebc92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:fa:02:5d:c5:3d:93:50:5c:5c:c6:c8:82: 33:b2:46:be:83:6b:30:35:17:11:2e:8a:a5:26:f5: 20:90:0e:9d:5c:7b:66:9d:d9:f0:b6:65:bf:64:1b: 21:8e:9e:68:4c:84:e4:02:88:ee:07:38:10:28:79: d6:8c:6a:da:76:27:92:1f:86:8b:77:c3:20:57:34: b3:2a:55:87:74:b4:82:01:8c:28:a4:1f:21:a9:91: 74:62:4f:63:11:e9:9a:97:5d:3c:8e:84:61:f9:52: 2f:c0:9f:e0:ba:25:ba:6a:80:51:2f:c3:43:65:3a: 73:64:62:9e:e2:f7:f5:f4:2a:0d:85:7c:27:d3:9b: 02:22:47:c3:22:21:a9:a3:4c:a2:22:72:0e:ba:d4: b1:af:db:be:80:eb:ed:58:65:0b:32:cb:b6:32:50: 77:d6:e5:be:7a:02:f4:96:6e:d3:3a:59:42:b0:43: 69:39:4c:8c:e4:ba:9e:0b:7e:4b:23:22:4a:16:f4: d7:44:ff:b5:44:33:90:77:3d:77:a1:19:bf:52:de: c4:f2:cf:e9:22:8a:f9:a1:a6:47:23:a5:9c:c6:e5: 22:9c:1a:a9:ba:9a:16:86:d8:86:f0:60:4f:6c:35: dc:dc:af:3a:06:44:a9:fa:9a:b2:92:df:02:79:6f: 5c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:76:57:DA:46:B2:B9:28:33:C6:AE:50:F6:62:20:11:66:A2:D8:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/13ffc853-d4eb-3a91-b9e1-2abff267e22d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:11:42:7e:5a:72:a9:e8:57:a6:0b:0d:59:90:a4:03:b7:f1: c0:5d:55:6a:cc:82:1f:cf:07:d0:49:c0:8c:c2:7e:d4:8d:f6: 16:50:ab:e5:03:fb:76:d0:e3:e1:e1:93:30:e5:6d:5b:c9:6d: f8:31:1f:77:f5:94:64:5d:69:d9:f6:07:52:ec:4e:bc:5a:65: 02:3a:7f:81:f0:da:e0:d0:68:9b:dd:1b:8a:dc:24:1a:a8:e4: d0:26:da:bc:d3:79:54:cf:58:2c:8c:3c:89:5c:22:0b:e1:63: 58:33:a1:a3:0a:7f:c1:88:d3:62:09:18:68:ed:16:c1:9b:59: bb:1c:72:48:88:bd:70:d1:b9:a8:6c:e2:97:4e:03:72:99:9d: bd:9b:2b:a7:05:6d:4a:5c:48:84:29:35:68:06:88:da:bd:2c: a8:c0:a5:a9:d6:27:3c:cb:1c:27:bb:6c:dc:23:c2:78:6a:d3: c7:92:a9:30:49:d6:41:05:d9:ae:69:9a:1e:7b:50:43:93:20: be:fb:c6:6a:f3:df:9a:5e:0f:56:99:ad:4b:a6:c5:00:5b:41: 74:5d:f9:df:d7:20:10:a4:f1:ac:32:de:54:a0:ce:36:f6:c2: 16:83:f6:13:78:83:6e:69:0e:fd:21:6c:06:2f:86:7c:2a:eb: 05:bd:b1:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0yxeJJWFGW8bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk MDVhYmU1NmYtNGEyOS00YmQ1LWI5Y2ItYmI4YzUwZWJjOTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihv6Al3FPZNQXFzGyIIzska+g2swNRcRLoql JvUgkA6dXHtmndnwtmW/ZBshjp5oTITkAojuBzgQKHnWjGradieSH4aLd8MgVzSz KlWHdLSCAYwopB8hqZF0Yk9jEemal108joRh+VIvwJ/guiW6aoBRL8NDZTpzZGKe 4vf19CoNhXwn05sCIkfDIiGpo0yiInIOutSxr9u+gOvtWGULMsu2MlB31uW+egL0 lm7TOllCsENpOUyM5LqeC35LIyJKFvTXRP+1RDOQdz13oRm/Ut7E8s/pIor5oaZH I6WcxuUinBqpupoWhtiG8GBPbDXc3K86BkSp+pqykt8CeW9cBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJ2V9pGsrkoM8auUPZiIBFmotjdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTNmZmM4NTMtZDRlYi0z YTkxLWI5ZTEtMmFiZmYyNjdlMjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRajMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEERQn5acqnoV6YLDVmQpAO38cBdVWrMgh/PB9BJwIzCftSN9hZQq+UD +3bQ4+HhkzDlbVvJbfgxH3f1lGRdadn2B1LsTrxaZQI6f4Hw2uDQaJvdG4rcJBqo 5NAm2rzTeVTPWCyMPIlcIgvhY1gzoaMKf8GI02IJGGjtFsGbWbscckiIvXDRuahs 4pdOA3KZnb2bK6cFbUpcSIQpNWgGiNq9LKjApanWJzzLHCe7bNwjwnhq08eSqTBJ 1kEF2a5pmh57UEOTIL77xmrz35peD1aZrUumxQBbQXRd+d/XIBCk8awy3lSgzjb2 whaD9hN4g25pDv0hbAYvhnwq6wW9sYQ= -----END CERTIFICATE-----Generated at Tue Oct 21 09:15:58 2025 by rpki-client